Known vulnerabilities in OpenShift Service Mesh - page 2

Software CPE: cpe:2.3:a:red_hat:openshift_service_mesh:*:*:*:*:*:*:*:*
Total vulnerabilities: 273
Public exploits: 17
Known exploited (KEV): 3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting OpenShift Service Mesh OpenShift Service Mesh is affected by 273 known vulnerabilities: 47 high, 157 medium, 69 low Critical High Medium Low

Vulnerabilities (273)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU102463 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-55565
CWE-835 Medium
No
No
2.5.8 08.01.2025 SB2025010849
SB2025010851
SB2025010853
and 45 more
#VU101027 - Error Handling
CVE-2024-21536
CWE-388 Medium
No
No
2.6.3 28.11.2024 SB2024112825
SB2024112826
SB2024120211
and 22 more
#VU100921 - Incorrect Regular Expression
CVE-2024-21538
CWE-185 Medium
No
No
2.4.13, 2.5.7 26.11.2024 SB2024112627
SB2024112629
SB2024120325
and 67 more
#VU99614 - Improper input validation
CVE-2024-50602
CWE-20 Medium
No
No
2.4.13, 2.5.7 01.11.2024 SB2024110155
SB2024110182
SB2024110534
and 98 more
#VU99261 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-47875
CWE-79 Medium
No
No
2.5.6 22.10.2024 SB20241022382
SB20241022383
SB20241022392
and 27 more
#VU98132 - Inefficient Regular Expression Complexity
CVE-2024-45296
CWE-1333 Low
No
No
2.6.2 08.10.2024 SB2024100822
SB2024100823
SB2024100826
and 87 more
#VU98131 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-43800
CWE-79 Medium
No
No
2.4.11, 2.5.5, 2.6.2 08.10.2024 SB2024100821
SB2024100824
SB2024100825
and 48 more
#VU98022 - Use of Uninitialized Variable
CVE-2024-9355
CWE-457 Medium
No
No
2.5.6 03.10.2024 SB2024100348
SB2024100349
SB2024101608
and 24 more
#VU97768 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-43799
CWE-79 Low
No
No
2.4.11, 2.5.5, 2.6.2 30.09.2024 SB2024093022
SB2024100824
SB2024100825
and 50 more
#VU97209 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-43796
CWE-79 Medium
No
No
2.6.2 12.09.2024 SB2024091250
SB2024091251
SB2024091252
and 52 more
#VU96899 - Integer overflow
CVE-2024-45492
CWE-190 High
No
No
2.4.11, 2.5.5, 2.5.6, 2.6.2 05.09.2024 SB20240905100
SB20240905101
SB20240905102
and 108 more
#VU96898 - Integer overflow
CVE-2024-45491
CWE-190 High
No
No
2.4.11, 2.5.5, 2.5.6, 2.6.2 05.09.2024 SB20240905100
SB20240905101
SB20240905102
and 106 more
#VU96897 - Buffer Underwrite ('Buffer Underflow')
CVE-2024-45490
CWE-124 High
No
No
2.4.11, 2.5.5, 2.5.6, 2.6.2 05.09.2024 SB20240905100
SB20240905101
SB20240905102
and 113 more
#VU96745 - Incorrect Regular Expression
CVE-2024-6232
CWE-185 Medium
No
No
2.4.11, 2.5.5, 2.5.6, 2.6.2 03.09.2024 SB2024090377
SB2024090927
SB2024091048
and 145 more
#VU96642 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-43788
CWE-79 Low
No
No
2.4.11, 2.5.5, 2.6.2 30.08.2024 SB2024083026
SB2024100824
SB2024100825
and 21 more
#VU95571 - Command injection
CVE-2024-6923
CWE-77 Medium
No
No
2.4.11, 2.5.5, 2.5.6, 2.6.2 08.08.2024 SB2024080861
SB2024080862
SB2024080863
and 144 more
#VU95157 - Incorrect Provision of Specified Functionality
CVE-2024-4032
CWE-684 Medium
No
No
2.4.11, 2.5.5, 2.5.6, 2.6.2 02.08.2024 SB2024080203
SB2024080207
SB2024080209
and 101 more
#VU94063 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2024-3596
CWE-327 Medium
Available
No
2.5.6 10.07.2024 SB2024071018
SB2024071019
SB2024071020
and 114 more
#VU93424 - Out-of-bounds read
CVE-2024-5535
CWE-125 Low
Available
No
2.5.6 27.06.2024 SB2024062720
SB20240717135
SB2024072154
and 157 more
#VU81307 - Improper input validation
CVE-2023-44270
CWE-20 Low
No
No
2.5.7 02.10.2023 SB2023100210
SB2023111710
SB2023112080
and 28 more


Showing elements 21 - 40 out of 273